A technician is performing basic workstation hardening on a newly installed Windows computer. Place the following security steps in the logical order they should be performed to secure the system from initial deployment to final user handoff.
- 1Change default passwords and disable unused default user accounts (such as the Guest account).
- 2Install operating system updates and enable the local host-based firewall.
- 3Disable unnecessary OS services, autorun features, and non-essential applications.
- 4Configure screen saver lock timeouts and password enforcement for local user profiles.
Cevap
The correct sequence starts with securing default accounts and credentials, followed by updating the system and turning on host firewall protection, then disabling unnecessary services and autorun features to minimize attack surface, and finally configuring screen lock timeouts for end-user environment security.
Securing default user accounts is the foundational step when hardening a system, followed by protecting network access through OS patches and local firewall activation. After establishing base network defenses, unnecessary software services and autorun functions are disabled to shrink the attack surface. End-user security controls, such as screen lock timeouts, are applied last before system deployment.
Adım Adım Çözüm
Anahtar Kavram
Workstation Hardening Standard Operating Procedure